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REMARKS 

Applicant appreciates the Examiner's thorough review of the application. Reconsideration 
and allowance of all claims are requested 

Cuiiendyexamincd claims indude claims 15 -17, 20 and 23 -36. Claims 1 - 14, 18 - Wand 
21 - 22 have been withdrawn, ^plicants reserve the rig^it to pursue the claims in divisional patent 
applications. 



Oaim Amgp4ments 

Applicant has amended the claims to more clearly indicate the subject matter claimed.* No 
new matter has been added by the amendments. In particular, the claims independent claims have 
been amended to more clearly describe the multi-dimensional content profiling. 

Support for the amendments to the claims and definicions of terms maybe found generally 
at p^es 51 - 61 of the spedficadon. No new matter has been added by the anaen^ments. More 
specifically, support for the amendnrients to the independent claims maybe found at, for example, 
R 49, 11. 7 . 11; R 52, IL 4 - 6; R 53, IL 12 - 13; P. 54, IL 15 - 16; and R 53, IL 13 - 15. 

. Applicant has added new daims 24 - 36, which depend from indepen^nt claims 15, 20 and 
23. No new matter has been added by the amendments. Support for the new claims maybe found 
generally at pages 51 - 61 of the specification. More specifically, support maybe found at: P. 41, IL 
7 - 11 for claim 24; R 54, L 17 - R 55, L 17 for claim 25; R 54, L 17 - P. 55, L 17 for claim 26; R 57, 
L 9 - R 58, L 6 for claim 27; R 53, IL 19 - 21 for claim 28; R 53, IL 19 - 21 for claim 29; R 53, IL 16 - 
18 for claim 30; P. 54, L 17 - R 55, L 17 for claim 31; P. 54, L 17 - R 55, L 17 for claim 32; R 41, U. 7 
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. 11 for claim 33; P. 59, IL 11 - 12 for claim 34; P. 60, L 9 - P. 61, L 7 for claim35; andP, 56,1L 1 - ^ 
forclaim36. 

No new matter has been added by the amendments. Reconsideration and aQowance of all 
claims arc requested. 



CMxm Ig - 17, go 2? - 3 ^ pfttpyftbte v^^X 3? U-S^C lQ2(e) over Doyle ^% (U^t 
Patent Publicati on No. 2005/003934^. 

C3aims 15 - 17, 20 and 23 - 36 are patentable over Doyle under 35 US.C 102(e). 
Reconsideration and allowance are requested. 

Independent claim 15 requires a method comprising: receiving networii dats^ processing the 
netwoik data at a decoder chain to create input data for applying at least muld-dimensional content 
profiling preventing, through the network data, leaks of information by at least applying the multi- 
dimensional content profiling; and wherein the muld-dimensional content profiling comprises: 
loading one or mote profiles, wherein the one or more profiles each comprise an expected set of 
statistical chaxacterisucs of data; continuously receivix^ the input data from the decoder chain; 
determining a probabilisdc measure of membersh^ of the input data relative to the one or more 
profiles; comparing the probabilistic measure with a threshold requiremem for each of the one or 
more profiles; and geneming a reactive measure if the probabilistic measure meets the threshold 
requirement. 

Independent claim 20 requires a machine-readable medium having encoded informadon, 
which when read and executed by a machine causes a method comprising: receiving network data; 
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processing the network data at a decoder chain to create input data for applying at least multi- 
dimensional content profiling; preventing, throug|i the network data> leaks of information by at least 
applying tnuld-diinensional content profiling; and herein the multi-dimensional content profiling 
comprises: loading one or more profiles, wherein the one or more profiles each comprise an 
expected set of statistical chaiacteristics of data; continuously receiving the input data from the 
decoder chain; determining a pmbabilistic measure of membership of the input data relative to the 
one or more profiles; comparing the probabilistic measure with a threshold requirement for each of 
the one or more profiles; and generating a rcaaive measure if the probabilistic measure meets the 
threshold requirement. 

Independent claim 23 requires an apparatus con^risir^ a receiver to receive network data; a 
processor, coupled to the receiver, to prevent, through the network data, leaks of information by at 
least applying nrulti-dimcnsional content profiling, wherein the processor processes the network 
data at a decoder chain to create input data for applying at least the muht-dimensional content 
profiling the muhi-dimensional content profiling comprising: loading one or more profiles, wherein 
the one or more profiles each comprise an expected set of statistical characteristics of dats^ 
continuously receiving the input data from the decoder chain; determining a probabilistic measure 
of membership of the input data relative to the one or more profiles; corrq)aring the probabilistic 
measiire with a threshold requirement for each of the one or more profiles; and generatir^ a 
reactive measure if the probabilistic measiue meets the threshold requirement. 

Doyle caimot anticipate the claims because Dojde does not contain all of the limitations of 
independent claims 15, 20 and 23. 

Doyk discloses a method of securing or controlling document components of compound 
doomients with seouity rules specific to paitioilardoounentc^ See Abstract Doyle 
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secures document components with "security containers" that encapsulate tbe components and 
component metadata. See Abstract Do>4e further discloses that document controls can be 
exeicised atthelevdof individual poitiom of a laiger document. See paxagraph 0037. Generally, 
Doyle discloses a digital rights management ("DRM") application. A document component 
applying the DRM of Doyle cannot be read withoxjt recipient having private key access. See, for 
example, FIG. 8. There is no su^stion that the private access ioeys comprise a set of statistical 
characteristics of data. Moreover, there is no determination that the probabilistic measure of 
membership of the input data in the set of statistical chaiaaeristics of data is foimd in Doyle. 
Fuxthexmore, Do>4e's invention does not require that the document is transferred over the network, 
but merely that a user atten^ to access the encrjpted content. 

In contrast^ Applicant's invention is a device for listening to networit data to prevent 
unwanted leaks of information. As recited in the independent claims, Applicant's invention 
requires, along with additional elements, receiving network data and applying multi-dimensional 
content profiling. Features stjch as the multi^dimensbnal content profiling as disclosed in 
Applicant's invention are neither disclosed nor suggested by Dojie. ^plicant*s invention performs 
these actions regardless of whetherthe network data is encrypted, has embedded DKMts^, or has 
the partial DRM ^'security containers** as fotmd in Doyle. Fuithermore, Applicant's invention does 
not require any special preparation of the network data beii% transferred over the network to be 
operational. 

AppUcant's invention is able to prevent leaks of information, including such information as 
woukl be in documents incorporating the enctyption of the Do)ie invention, by ^lyir^ muhi- 
dimensional content profiling on received network data. As clearly set forth in the disclosure muki- 
dimensional content profiling is a combination of techniques taigeted at identification of docmnents 
belonging to a certain document class. Specification at ps^e 51, line 5 • p^ 61, line 10. The daims 
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have been amended to rooxt cleaily specify the operation of multi-dimensional content profiling. 
Generally; muki-dimensional content piofiling is a collection of statistical routines that profile data 
by implementing a set of incieasinglyprecise statistical estimators and implementing run-time 
verification of extracted entities. Specification at page 51, line 5 - p^e 61, line 10, Multi- 
dimensional content prof iling or similar procedures are not found in 

Do)4e does not teach the invention as claimed in the independent claims* For example, the 
Office Action cites to paragraphs 0014, 0021, 0038, 0040 - 0041, 0044 - 0047, 0050 - 0051, 0057 - 
0060 and 0081 - 0087 as teaching ""preventing, throxigh the netwoxkdata, leaks of infonmtionbyat 
least applying muhi-dimensional content profiling**. See page 3 of the April 27, 2007 Office Action. 
These pan^^aphs, however, do not ^pear to teach applying the muM-dimensional content profiling 
required by the claims. For example, paragn^h 0014 discloses control, by document creators, of 
access to individual components of a docimient, but does not disclose applying multi-dimensional 
content profiling. Paragrq)h 0021 discloses control of access to document components by 
conditional logic, but does not disclose applying multi-dimensionai content proHling. Pac^raph 
0038 discloses a "security container" encapsulating portions of a document for controlling access to 
that component, but does not disclose applying multi-dimensional content profiling. Paragraphs 
0040 - 0041 disclose metadata associated with document components for controlling access to the 
components and for containing functional controls for the components, but do not disclose 
applying muM-dimensional content profiling. Paragraph 0044 discloses preventing accidental 
dissemination of information by preventing receiving paxties from accessing the con:iponents uxiless 
authorized, but does not disclose app^ing muhi-dimensional content profiling. Paragraphs 0045 - 
0047 disclose encryption headers, encrypted symmetric keys or public key inftastnicture 
public/private key pairs for determining whether a receiving pany is authorissed to view document 
components, but do not disclose applying multi-dimensional content profiling. Par^;n^hs 0050 - 
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0051 disclose encrypted document conqwnents with contiols on access, but do not disclose 
applying multi-dimensional content profiling. Paragraphs 0057 - 0060 discbse object-oiiemed 
security container operations, including ''filter rules" for determining whether a document 
component may be accessed by a user. In particular, the filter rules in paragraphs 0059 • 0060 
disclose a series of rules for checking authorization to aa upon a security container objea or 
document component object, but do not disdose applying muki-dimensional content profiling as 
requited in the claims. Paragraphs 0081 - 0087 disclose receiving access requests and verifying a 
user's privilege rights regarding access through a series of requests mediated by the encryption 
header, but do not disclose s^lying muldrdimensional content profiling. Doyk simpty makes the 
reading of the content more difficult, but in no way stops the transfer of the encrypted data. 

Therefore, Doyk at least does not disclose preventing, through the network data, leaks of 
information by at least applying multi- dimensional content profilir^ as required in the independent 
claims. Doyk does not disclose each and every element of the independent claims so a rejection 
under 35 U.S.C 102 is unsupportable. Oonsequendy, independem claims 15, 20 and 23 arc 
patentable over Doyle. 

Dependent claims 16 - 17 and 24 - 36 add further patentable features to the patentable 
features of the independetrt claims. Therefore, the dependent claims are patentable over Do)ie. 

Because Doyle does not disclose each and every limitation found in ckums 15 - 17, 20 and 
23 - 36 Doyle does not anticipate these claims. Accordingly, claims 15 - 17, 20 and 23 - 36 are 
patentable over Doyle. Applicants respectfully request that the Examiner withdraw the rejection. 
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INCLUSION 

In view of the foregoing amendments and remarks, Applicants respectfully request 
reconsideration and reexamination of this application and the timely allowance of the pending 
claims. 

Applicant believes no fee is due with this Amendment. However, if a fee is due, please 
charge our Deposit Account No. 50-2228, under Order No. 020501 .0802PTUS from which the 
xinders^ned is authorized to draw. 



Dated: 



Matthew X Laskosla 
Registraifon No.: 55,360 
PATTON BOGGS LLP 
8484 Westpark Drive, 9th Floor 
McLeajn, Virginia 22102 
(703)744 - 8000 
(703) 744 - 8001 (Fax) 
Attorney for Applicant 



NOVA\3684762,01 



15 



PAGE 17/22 * RCVD AT 4/28/2008 4:27:44 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-6/41 * DNIS:2738300 * CSID: * DURATION <mm-S8):10-04 



